What is the CVSS score of CVE-2026-32907?

CVE-2026-32907 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Which versions of Windows are affected by CVE-2026-32907?

OpenClaw versions before 2026.2.19 contain a local privilege escalation vulnerability allowing attackers with system access to execute arbitrary commands.. A patch is available.

How to fix or mitigate CVE-2026-32907?

Within 24 hours: Inventory all systems running OpenClaw and identify version numbers; assess which systems have local user access and run the vulnerable scheduler component. Within 7 days: Apply vendor patch 2026.2.19 or later to all affected instances, prioritizing production systems and those with high-risk data access. Within 30 days: Complete patching across all environments and validate through security testing; document remediation status for audit and compliance purposes.

Windows CVE-2026-32907

EUVD-2026-14588 HIGH

OS Command Injection (CWE-78)

2026-03-23 VulnCheck

GHSA-ch47-q2q6-jch2

Microsoft Command Injection Windows

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 23, 2026 - 22:00 euvd

EUVD-2026-14588

Analysis Generated

Mar 23, 2026 - 22:00 vuln.today

Patch released

Mar 23, 2026 - 22:00 nvd

Patch available

CVE Published

Mar 23, 2026 - 21:36 nvd

HIGH 7.8

DescriptionCVE.org

OpenClaw before 2026.2.19 contains a local command injection vulnerability in Windows scheduled task script generation that allows attackers to execute arbitrary commands by injecting cmd metacharacters into unsafe gateway.cmd arguments. Attackers with control over service script generation values can inject unescaped metacharacters or expansion-sensitive characters to achieve unintended command execution in the scheduled task context.

AnalysisAI

OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in the Windows scheduled task script generation component. Attackers with low-level local privileges and control over service script generation values can inject cmd metacharacters into the gateway.cmd arguments to execute arbitrary commands with high impact to confidentiality, integrity, and availability. There is no indication of active exploitation (not in CISA KEV), but a patch commit is publicly available which may facilitate proof-of-concept development.

Technical ContextAI

This vulnerability affects OpenClaw (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), specifically the Windows scheduled task script generation mechanism that creates gateway.cmd files. The root cause is CWE-78 (Improper Neutralization of Special Elements used in an OS Command). When generating scheduled task scripts on Windows, the application fails to properly sanitize or escape user-controlled input before incorporating it into command-line arguments. This allows injection of cmd.exe metacharacters (such as &, |, ^, %, and others) and expansion-sensitive characters that can break out of the intended command context and execute arbitrary system commands when the scheduled task runs.

RemediationAI

Upgrade OpenClaw to version 2026.2.19 or later, which contains the fix for this command injection vulnerability. The patch is available from the vendor and can be reviewed in commit 280c6b117b2f0e24f398e5219048cd4cc3b82396 at https://github.com/openclaw/openclaw/commit/280c6b117b2f0e24f398e5219048cd4cc3b82396. Consult the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-mqr9-vqhq-3jxw for complete remediation guidance. As an interim mitigation until patching is completed, restrict local user access to systems running OpenClaw, implement strict controls over who can modify service script generation configurations, monitor scheduled task creation for suspicious command patterns, and apply principle of least privilege to limit the execution context of scheduled tasks.